last executing test programs: 4.622033941s ago: executing program 1 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='erofs_readpages\x00', r4, 0x0, 0xffffffffe970632a}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="4dd34f77abbf0137e20a1dded9ce340ba59c85e4c267bf511e62fc81055cdd95841cc537c71de8e1ca64e873ede2c1232afaf8cfd44836b4416de8fef1e0d828ae", @ANYRES8=r6], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r5}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x2144}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x10) 3.733440977s ago: executing program 1 (id=361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_io_uring_setup(0x2e77, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x2, 0x35f}, &(0x7f0000000300)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.711744238s ago: executing program 1 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES32=r0], 0x48) read$hiddev(0xffffffffffffffff, &(0x7f00000000c0)=""/4092, 0xffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES64=r0, @ANYRESOCT], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x83c0550b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) r3 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r3}) add_key$fscrypt_v1(0x0, &(0x7f0000000780)={'fscrypt:', @auto=[0x33, 0x31, 0x61, 0x63, 0x33, 0x31, 0x37, 0x32, 0x32, 0x0, 0x31, 0x56, 0x65, 0x34, 0x31, 0x35]}, &(0x7f00000007c0)={0x0, "39a0ad0b034162fe8e7c4ce914db211ccb64df2e9934a27b618a1da73a1a6fff3a2313f1ce39da7db811f1a0b4fffcf496945bceef4f1d1343d056883b493c7d", 0x39}, 0x48, r3) nanosleep(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzszzGKwkAABdAfMpvNsrvoEWwsBAtb72DrfXIeexstvY+tpUJMxAuICO8xxcz/v5nwZv/fz682l0lyTdrTkJSf4fLbn+yrx7h0s029XiSpSkr+0t3zZZ3Mx9ExTerpV7JK358PbTN2292LPwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+EWAAD//zEFCkI=") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 2.797454386s ago: executing program 4 (id=382): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0xff, 0x0) r2 = dup(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) ioctl$SG_GET_NUM_WAITING(r6, 0x227d, &(0x7f00000001c0)) r7 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7, '\x00', 0x0, r2, 0x5, 0x2, 0x1}, 0x50) keyctl$KEYCTL_MOVE(0x1e, r7, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) pipe(&(0x7f0000000240)) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$reject(0x13, r7, 0xffff, 0x8000000000000001, r8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000280)=ANY=[]) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000000)={0x1, 0x7f, 0x9}) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r4) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 2.714934587s ago: executing program 4 (id=383): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r2 = syz_io_uring_setup(0x2421, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x10}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c00c4562da5edff12be887b7e52081f908ffddd3357a8fd7f3a74a39cdbd617f8ed47525b3e5cd67042500f0d100d25330a160ef04879eacba187ee69393437"]) 2.705947587s ago: executing program 4 (id=384): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080000000000000003018de34bd338130000000000000000f0818e3a"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 2.656298189s ago: executing program 1 (id=386): pipe2$9p(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0xff, 0x0) dup(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) 2.628968579s ago: executing program 1 (id=387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001180)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xec6, &(0x7f0000001340)={@random="f53d438dfa20", @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0x4e, 0xf8, "a7", "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"}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_clone(0x63880180, 0x0, 0xffffff2b, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0900000004000000040000000200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000000000000"], 0x50) 2.494812811s ago: executing program 2 (id=388): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000d80)=ANY=[], 0x28, 0x40}}], 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) 1.490053081s ago: executing program 0 (id=390): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0x0) 1.488127491s ago: executing program 1 (id=391): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.427861282s ago: executing program 0 (id=392): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000100, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000580)={0x0, &(0x7f0000000400)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 1.378299723s ago: executing program 4 (id=394): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0xff, 0x0) r2 = dup(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) ioctl$SG_GET_NUM_WAITING(r6, 0x227d, &(0x7f00000001c0)) r7 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7, '\x00', 0x0, r2, 0x5, 0x2, 0x1}, 0x50) keyctl$KEYCTL_MOVE(0x1e, r7, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) pipe(&(0x7f0000000240)) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$reject(0x13, r7, 0xffff, 0x8000000000000001, r8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000280)=ANY=[]) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000000)={0x1, 0x7f, 0x9}) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r4) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 1.310972055s ago: executing program 0 (id=395): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r0) 1.227786916s ago: executing program 2 (id=396): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0xfffe, 0x2) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2}]}, {0x0, [0x2e, 0x61, 0x5f]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="000000002000b70300000000300900000000000000cb719d083800b700000000000006950000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000"], 0xe0}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000ffdbdf25fe8000000000000000000000000000aa00000000000000000000ffffac1414bb0000000000000000000000802f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000001d000000000000000000b4ca0004d56c"], 0xf8}, 0x1, 0x0, 0x0, 0x8064}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001680)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r3, @ANYRES8=r1, @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYRES16=r5], 0xf8}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x5c, &(0x7f0000001780)=[@in6={0xa, 0x4e21, 0x5, @mcast1, 0xb0ba}, @in={0x2, 0x6ea2, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000140)=0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r9, 0x0, 0x9) 1.181094507s ago: executing program 0 (id=397): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = socket(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) setfsgid(0xee00) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) getresuid(&(0x7f0000000e40)=0x0, &(0x7f0000000e80), &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)="b4359ab8682ebe2e50c999452f1855b876c52e962806579b085fe203364d0f91d694a6e887195882f62666668aa1fa15bbde1cf4d9dabdcb6fde800f267a6a752acb4577e5c9e01732ef0537ef5721a74cc7d8e8e88e103f97e7da1e80520031ec064de9d1911702b0f09bd4ccc1cfaaf060b8c6d0de704a82202c792f7e6c5eb4d5aea3e76ef6e841212a1ea0d49fab843e0119500031f0b1e5951c1c08ab23ad3a232181732c6e1ab8f4c825b0ffbfc3ef694dff7ea2ec24afd8efc358ba376ad79293fbdba1408ad19f155c887beb22880790a70ed12027cad34e1b055a220a6906f376b044214872d83183a47ff705c787d0", 0xf4}, {&(0x7f0000000540)="935b05639eb92cd6fff284b8d7e22e3b6b10916661f5481a470b1c88ed9dd9802a0ba21194748bc7532a47b5c386d95ede4ca3fb5e7251b5ed1eb229330103fa2ba66b630d9d1ba77201048a9a812f7d8a341a522dc09ebb81091d0e146f72b265adbaebee4a95091bc395f3523cd2506422e1415e858768407115", 0x7b}, {&(0x7f0000000800)="ce91e2d36ddccac2b52cba51591fa7402f42a444fdb65d614c50372d54f43ea9cfde29486d070b3975c4034e5dcd45dce1667f59d7c77c0e81cac3309a07c7", 0x3f}], 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c00000000000000010000000100000097ddb369e494bcd07198ed38776de9237e03c0ebcd36772c174e11e5d90aeabb48a7387dc3589f6095d5dcdda65733ef0cd59b42165fe0f97e67ec622a4b1ffeacde00"/97, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x8000}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000c40)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000000ac0)=[@rights={{0x2c, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @rights={{0x28, 0x1, 0x1, [r0, r5, 0xffffffffffffffff, r5, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0x98, 0x2c040080}}], 0x2, 0x4004) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="040094807a026c57d2654d115e528c1459241cdf02597f14d35c3655073c5f407b4160b64e80e167c709d80d9da587820eeb0f3c363a773f519c2717597d2217f73d756a1e5262327a0d6705cffb6119d2df818584899aaf8d7b874dbb99330a6d2593829a3125c105c65840af5555000d003f0026e4b56b1866ada1d6000000ae69a5084963450371ed"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r9}, {0xe61, 0x0, 0x0, 0x2, 0x9, 0x1, 0xffd, 0xc}, {0xfffffffffffff5b9, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x43500, 0x0, 0x2, 0x4, 0xc, 0xd0, 0x2}}, 0xe8) r10 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r9, r10) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x1}, [{0x2, 0x1}], {}, [{0x8, 0x0, r7}, {0x8, 0x6, r10}, {0x8, 0x1, r7}], {0x10, 0x4}}, 0x44, 0x1) 1.161606958s ago: executing program 4 (id=398): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000001c0)="285aee6bd9fc3943dfa536ebc48e4a6f2321dde70af47ceeccca1412dc66493be19cc1fafe33e97da4075bfb48c0993adbe41873c46699cf7ee19a1a8febc100ed83ae70436f9e695c5513c882f5944677e37f652a4f83058f60717bd552054162702d27f018a7ec711dc895d2104661e4c048c2ef1212b175c3d603dfbc7274bcf2320ac8e4cfbfe18437f47a67197d63d4cbb5f9be5649153e1e662ad25c66bb476270bbca9d66c31e5cf012c78965b58e76d6bee4343f11b2018bff0174feda1c7e998b1e99e0ac6a6a5bb71349c557dd492d116ea019a62258df7e63521f65362e8e2be0c1f1f1") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000500000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\.\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r4) r8 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r7) keyctl$read(0xb, r8, &(0x7f0000000300)=""/51, 0xfffffffffffffc2f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) pwrite64(r2, &(0x7f0000000640)='2', 0x1, 0xe7c) 833.524934ms ago: executing program 4 (id=399): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf00000000000005"]) 824.245114ms ago: executing program 0 (id=409): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = socket(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) setfsgid(0xee00) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) getresuid(&(0x7f0000000e40)=0x0, &(0x7f0000000e80), &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)="b4359ab8682ebe2e50c999452f1855b876c52e962806579b085fe203364d0f91d694a6e887195882f62666668aa1fa15bbde1cf4d9dabdcb6fde800f267a6a752acb4577e5c9e01732ef0537ef5721a74cc7d8e8e88e103f97e7da1e80520031ec064de9d1911702b0f09bd4ccc1cfaaf060b8c6d0de704a82202c792f7e6c5eb4d5aea3e76ef6e841212a1ea0d49fab843e0119500031f0b1e5951c1c08ab23ad3a232181732c6e1ab8f4c825b0ffbfc3ef694dff7ea2ec24afd8efc358ba376ad79293fbdba1408ad19f155c887beb22880790a70ed12027cad34e1b055a220a6906f376b044214872d83183a47ff705c787d0", 0xf4}, {&(0x7f0000000540)="935b05639eb92cd6fff284b8d7e22e3b6b10916661f5481a470b1c88ed9dd9802a0ba21194748bc7532a47b5c386d95ede4ca3fb5e7251b5ed1eb229330103fa2ba66b630d9d1ba77201048a9a812f7d8a341a522dc09ebb81091d0e146f72b265adbaebee4a95091bc395f3523cd2506422e1415e858768407115", 0x7b}, {&(0x7f0000000800)="ce91e2d36ddccac2b52cba51591fa7402f42a444fdb65d614c50372d54f43ea9cfde29486d070b3975c4034e5dcd45dce1667f59d7c77c0e81cac3309a07c7", 0x3f}], 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c00000000000000010000000100000097ddb369e494bcd07198ed38776de9237e03c0ebcd36772c174e11e5d90aeabb48a7387dc3589f6095d5dcdda65733ef0cd59b42165fe0f97e67ec622a4b1ffeacde00"/97, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x8000}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000c40)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000000ac0)=[@rights={{0x2c, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @rights={{0x28, 0x1, 0x1, [r0, r5, 0xffffffffffffffff, r5, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0x98, 0x2c040080}}], 0x2, 0x4004) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="040094807a026c57d2654d115e528c1459241cdf02597f14d35c3655073c5f407b4160b64e80e167c709d80d9da587820eeb0f3c363a773f519c2717597d2217f73d756a1e5262327a0d6705cffb6119d2df818584899aaf8d7b874dbb99330a6d2593829a3125c105c65840af5555000d003f0026e4b56b1866ada1d6000000ae69a5084963450371edc84dc99933e5f3798214db2bbd9046f0ccf707e29850c523bbf617b1d7ef1a551fb4d16bc02c3b80b31afd787c9d7b26e5ddbb196f76b5ae845fa547821e75e7ce9e57909e"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r9}, {0xe61, 0x0, 0x0, 0x2, 0x9, 0x1, 0xffd, 0xc}, {0xfffffffffffff5b9, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x43500, 0x0, 0x2, 0x4, 0xc, 0xd0, 0x2}}, 0xe8) r10 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r9, r10) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x1}, [{0x2, 0x1}], {}, [{0x8, 0x0, r7}, {0x8, 0x6, r10}, {0x8, 0x1, r7}], {0x10, 0x4}}, 0x44, 0x1) 629.391728ms ago: executing program 0 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES32=r0], 0x48) read$hiddev(0xffffffffffffffff, &(0x7f00000000c0)=""/4092, 0xffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES64=r0, @ANYRESOCT], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x83c0550b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) r3 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r3}) add_key$fscrypt_v1(0x0, &(0x7f0000000780)={'fscrypt:', @auto=[0x33, 0x31, 0x61, 0x63, 0x33, 0x31, 0x37, 0x32, 0x32, 0x0, 0x31, 0x56, 0x65, 0x34, 0x31, 0x35]}, &(0x7f00000007c0)={0x0, "39a0ad0b034162fe8e7c4ce914db211ccb64df2e9934a27b618a1da73a1a6fff3a2313f1ce39da7db811f1a0b4fffcf496945bceef4f1d1343d056883b493c7d", 0x39}, 0x48, r3) nanosleep(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzszzGKwkAABdAfMpvNsrvoEWwsBAtb72DrfXIeexstvY+tpUJMxAuICO8xxcz/v5nwZv/fz682l0lyTdrTkJSf4fLbn+yrx7h0s029XiSpSkr+0t3zZZ3Mx9ExTerpV7JK358PbTN2292LPwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+EWAAD//zEFCkI=") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 463.642641ms ago: executing program 3 (id=401): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x2000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb851}, 0x1c) 409.842942ms ago: executing program 3 (id=402): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000100, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 300.658694ms ago: executing program 3 (id=403): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0x0) 300.048844ms ago: executing program 2 (id=404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) 296.556515ms ago: executing program 3 (id=405): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000000)={0x1, 0x7f, 0x9}) 241.054365ms ago: executing program 3 (id=406): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x226, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffda2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 240.742335ms ago: executing program 2 (id=407): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r1) 194.294136ms ago: executing program 2 (id=408): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0xff, 0x0) r2 = dup(r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) ioctl$SG_GET_NUM_WAITING(r6, 0x227d, &(0x7f00000001c0)) r7 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r2, 0x5, 0x2, 0x1}, 0x50) keyctl$KEYCTL_MOVE(0x1e, r7, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) pipe(&(0x7f0000000240)) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$reject(0x13, r7, 0xffff, 0x8000000000000001, r8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000280)=ANY=[]) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000000)={0x1, 0x7f, 0x9}) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r4) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 91.582228ms ago: executing program 2 (id=410): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000001c0)="285aee6bd9fc3943dfa536ebc48e4a6f2321dde70af47ceeccca1412dc66493be19cc1fafe33e97da4075bfb48c0993adbe41873c46699cf7ee19a1a8febc100ed83ae70436f9e695c5513c882f5944677e37f652a4f83058f60717bd552054162702d27f018a7ec711dc895d2104661e4c048c2ef1212b175c3d603dfbc7274bcf2320ac8e4cfbfe18437f47a67197d63d4cbb5f9be5649153e1e662ad25c66bb476270bbca9d66c31e5cf012c78965b58e76d6bee4343f11b2018bff0174feda1c7e998b1e99e0ac6a6a5bb71349c557dd492d116ea019a62258df7e63521f65362e8e2be0c1f1f1") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000500000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\.\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r4) r8 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r7) keyctl$read(0xb, r8, &(0x7f0000000300)=""/51, 0xfffffffffffffc2f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) pwrite64(r2, &(0x7f0000000640)='2', 0x1, 0xe7c) 0s ago: executing program 3 (id=411): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = socket(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) setfsgid(0xee00) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) getresuid(&(0x7f0000000e40)=0x0, &(0x7f0000000e80), &(0x7f0000000ec0)) stat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)="b4359ab8682ebe2e50c999452f1855b876c52e962806579b085fe203364d0f91d694a6e887195882f62666668aa1fa15bbde1cf4d9dabdcb6fde800f267a6a752acb4577e5c9e01732ef0537ef5721a74cc7d8e8e88e103f97e7da1e80520031ec064de9d1911702b0f09bd4ccc1cfaaf060b8c6d0de704a82202c792f7e6c5eb4d5aea3e76ef6e841212a1ea0d49fab843e0119500031f0b1e5951c1c08ab23ad3a232181732c6e1ab8f4c825b0ffbfc3ef694dff7ea2ec24afd8efc358ba376ad79293fbdba1408ad19f155c887beb22880790a70ed12027cad34e1b055a220a6906f376b044214872d83183a47ff705c787d0", 0xf4}, {&(0x7f0000000540)="935b05639eb92cd6fff284b8d7e22e3b6b10916661f5481a470b1c88ed9dd9802a0ba21194748bc7532a47b5c386d95ede4ca3fb5e7251b5ed1eb229330103fa2ba66b630d9d1ba77201048a9a812f7d8a341a522dc09ebb81091d0e146f72b265adbaebee4a95091bc395f3523cd2506422e1415e858768407115", 0x7b}, {&(0x7f0000000800)="ce91e2d36ddccac2b52cba51591fa7402f42a444fdb65d614c50372d54f43ea9cfde29486d070b3975c4034e5dcd45dce1667f59d7c77c0e81cac3309a07c7", 0x3f}], 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c00000000000000010000000100000097ddb369e494bcd07198ed38776de9237e03c0ebcd36772c174e11e5d90aeabb48a7387dc3589f6095d5dcdda65733ef0cd59b42165fe0f97e67ec622a4b1ffeacde00"/97, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x8000}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000c40)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000000ac0)=[@rights={{0x2c, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @rights={{0x28, 0x1, 0x1, [r0, r5, 0xffffffffffffffff, r5, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0x98, 0x2c040080}}], 0x2, 0x4004) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="040094807a026c57d2654d115e528c1459241cdf02597f14d35c3655073c5f407b4160b64e80e167c709d80d9da587820eeb0f3c363a773f519c2717597d2217f73d756a1e5262327a0d6705cffb6119d2df818584899aaf8d7b874dbb99330a6d2593829a3125c105c65840af5555000d003f0026e4b56b1866ada1d6000000ae69a5084963450371edc84dc99933e5f3798214db2bbd9046f0ccf707e29850c523bbf617b1d7ef1a551fb4d16bc02c3b80b31afd787c9d7b26e5ddbb196f76b5ae845fa547821e75e7ce9e57909e"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r9}, {0xe61, 0x0, 0x0, 0x2, 0x9, 0x1, 0xffd, 0xc}, {0xfffffffffffff5b9, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x43500, 0x0, 0x2, 0x4, 0xc, 0xd0, 0x2}}, 0xe8) r10 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r9, r10) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x1}, [{0x2, 0x1}], {}, [{0x8, 0x0, r7}, {0x8, 0x6, r10}, {0x8, 0x1, r7}], {0x10, 0x4}}, 0x44, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.249' (ED25519) to the list of known hosts. [ 27.659017][ T29] audit: type=1400 audit(1759101490.335:62): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.660292][ T3286] cgroup: Unknown subsys name 'net' [ 27.681839][ T29] audit: type=1400 audit(1759101490.345:63): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.709214][ T29] audit: type=1400 audit(1759101490.365:64): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.849940][ T3286] cgroup: Unknown subsys name 'cpuset' [ 27.856305][ T3286] cgroup: Unknown subsys name 'rlimit' [ 28.008834][ T29] audit: type=1400 audit(1759101490.685:65): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.032176][ T29] audit: type=1400 audit(1759101490.695:66): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.052661][ T29] audit: type=1400 audit(1759101490.695:67): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.073115][ T29] audit: type=1400 audit(1759101490.695:68): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.086172][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.093434][ T29] audit: type=1400 audit(1759101490.695:69): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.127016][ T29] audit: type=1400 audit(1759101490.695:70): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.150384][ T29] audit: type=1400 audit(1759101490.785:71): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.212655][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.113560][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 30.177920][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 30.190781][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 30.236157][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 30.280637][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.287737][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.295006][ T3306] bridge_slave_0: entered allmulticast mode [ 30.301681][ T3306] bridge_slave_0: entered promiscuous mode [ 30.309333][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.316486][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.323998][ T3298] bridge_slave_0: entered allmulticast mode [ 30.330585][ T3298] bridge_slave_0: entered promiscuous mode [ 30.344802][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.352063][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.359254][ T3306] bridge_slave_1: entered allmulticast mode [ 30.365935][ T3306] bridge_slave_1: entered promiscuous mode [ 30.380087][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.387176][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.394362][ T3298] bridge_slave_1: entered allmulticast mode [ 30.400956][ T3298] bridge_slave_1: entered promiscuous mode [ 30.434897][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.442103][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.449411][ T3303] bridge_slave_0: entered allmulticast mode [ 30.455730][ T3303] bridge_slave_0: entered promiscuous mode [ 30.465108][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.480987][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.497427][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.504610][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.511912][ T3303] bridge_slave_1: entered allmulticast mode [ 30.518227][ T3303] bridge_slave_1: entered promiscuous mode [ 30.531075][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.541113][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.569086][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.600161][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.622126][ T3306] team0: Port device team_slave_0 added [ 30.628531][ T3298] team0: Port device team_slave_0 added [ 30.634559][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.641713][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.648887][ T3300] bridge_slave_0: entered allmulticast mode [ 30.655542][ T3300] bridge_slave_0: entered promiscuous mode [ 30.662230][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 30.677277][ T3306] team0: Port device team_slave_1 added [ 30.683735][ T3298] team0: Port device team_slave_1 added [ 30.695183][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.702302][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.709743][ T3300] bridge_slave_1: entered allmulticast mode [ 30.716355][ T3300] bridge_slave_1: entered promiscuous mode [ 30.731297][ T3303] team0: Port device team_slave_0 added [ 30.753889][ T3303] team0: Port device team_slave_1 added [ 30.760596][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.781737][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.788707][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.814862][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.832428][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.843935][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.850959][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.876916][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.888324][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.895324][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.921339][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.932382][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.939481][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.965521][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.994307][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.001312][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.027348][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.055678][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.062723][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.088684][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.100188][ T3300] team0: Port device team_slave_0 added [ 31.111749][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.118861][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.126163][ T3307] bridge_slave_0: entered allmulticast mode [ 31.132630][ T3307] bridge_slave_0: entered promiscuous mode [ 31.148463][ T3306] hsr_slave_0: entered promiscuous mode [ 31.154614][ T3306] hsr_slave_1: entered promiscuous mode [ 31.161275][ T3300] team0: Port device team_slave_1 added [ 31.184904][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.192026][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.199317][ T3307] bridge_slave_1: entered allmulticast mode [ 31.205773][ T3307] bridge_slave_1: entered promiscuous mode [ 31.220587][ T3298] hsr_slave_0: entered promiscuous mode [ 31.226657][ T3298] hsr_slave_1: entered promiscuous mode [ 31.232552][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 31.238288][ T3298] Cannot create hsr debugfs directory [ 31.267127][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.274159][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.300135][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.325230][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.341948][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.348927][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.374941][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.389020][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.429340][ T3303] hsr_slave_0: entered promiscuous mode [ 31.435646][ T3303] hsr_slave_1: entered promiscuous mode [ 31.441673][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 31.447427][ T3303] Cannot create hsr debugfs directory [ 31.469452][ T3307] team0: Port device team_slave_0 added [ 31.476191][ T3307] team0: Port device team_slave_1 added [ 31.484365][ T3300] hsr_slave_0: entered promiscuous mode [ 31.490793][ T3300] hsr_slave_1: entered promiscuous mode [ 31.496753][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 31.502582][ T3300] Cannot create hsr debugfs directory [ 31.564736][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.571746][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.597733][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.630803][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.637835][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.663763][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.728837][ T3307] hsr_slave_0: entered promiscuous mode [ 31.735075][ T3307] hsr_slave_1: entered promiscuous mode [ 31.740975][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 31.746714][ T3307] Cannot create hsr debugfs directory [ 31.805135][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.813997][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.825844][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.837199][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.878836][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.887937][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.901059][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.912101][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.954308][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.967430][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.983961][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.992873][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.007410][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.026526][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.041318][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.050311][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.059402][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.093009][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.107800][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.129560][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.140301][ T560] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.147411][ T560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.159694][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.168453][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.182035][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.193558][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.212359][ T560] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.219445][ T560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.227889][ T560] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.234981][ T560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.250666][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.260258][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.267396][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.291317][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.309257][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.319883][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.327072][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.335674][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.342825][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.397625][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.421346][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.436784][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.443893][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.477649][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.486492][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.493717][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.543193][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.552469][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.562950][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.591898][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.599094][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.633297][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.644735][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.651857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.674852][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.703086][ T3306] veth0_vlan: entered promiscuous mode [ 32.714155][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.725785][ T3306] veth1_vlan: entered promiscuous mode [ 32.757518][ T3306] veth0_macvtap: entered promiscuous mode [ 32.765660][ T3306] veth1_macvtap: entered promiscuous mode [ 32.800504][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.824887][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.866450][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.875367][ T3443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.892515][ T3298] veth0_vlan: entered promiscuous mode [ 32.910727][ T3443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.923670][ T3298] veth1_vlan: entered promiscuous mode [ 32.936661][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.936675][ T29] audit: type=1400 audit(1759101495.615:81): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.BdcAAg/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.947206][ T3303] veth0_vlan: entered promiscuous mode [ 32.966902][ T29] audit: type=1400 audit(1759101495.615:82): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.966931][ T29] audit: type=1400 audit(1759101495.615:83): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.BdcAAg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.977282][ T3443] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.994523][ T29] audit: type=1400 audit(1759101495.615:84): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.026068][ T3300] veth0_vlan: entered promiscuous mode [ 33.028557][ T29] audit: type=1400 audit(1759101495.615:85): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.BdcAAg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.067308][ T3298] veth0_macvtap: entered promiscuous mode [ 33.082400][ T29] audit: type=1400 audit(1759101495.615:86): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.BdcAAg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.108078][ T3303] veth1_vlan: entered promiscuous mode [ 33.115563][ T29] audit: type=1400 audit(1759101495.615:87): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.126467][ T3300] veth1_vlan: entered promiscuous mode [ 33.150843][ T3443] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.159199][ T29] audit: type=1400 audit(1759101495.615:88): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.172580][ T3303] veth0_macvtap: entered promiscuous mode [ 33.182349][ T29] audit: type=1400 audit(1759101495.615:89): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="gadgetfs" ino=4570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.192774][ T3303] veth1_macvtap: entered promiscuous mode [ 33.222664][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.231534][ T3298] veth1_macvtap: entered promiscuous mode [ 33.258723][ T3300] veth0_macvtap: entered promiscuous mode [ 33.268015][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.284516][ T29] audit: type=1400 audit(1759101495.965:90): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.297057][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.321361][ T3300] veth1_macvtap: entered promiscuous mode [ 33.331293][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.341345][ T3462] mmap: syz.0.1 (3462) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.342145][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.369087][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.385023][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.395440][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.429814][ T3435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.438801][ T3435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.462394][ T3462] program syz.0.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.472316][ T3435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.484106][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.520729][ T3435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.539102][ T3435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.579694][ T3435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.598918][ T3307] veth0_vlan: entered promiscuous mode [ 33.632923][ T3435] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.644812][ T3307] veth1_vlan: entered promiscuous mode [ 33.655902][ T3435] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.674262][ T3435] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.683953][ T3307] veth0_macvtap: entered promiscuous mode [ 33.705536][ T3307] veth1_macvtap: entered promiscuous mode [ 33.713220][ T3435] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.727448][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.746769][ T3484] program syz.3.8 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.770843][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.807813][ T3443] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.848545][ T3443] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.881887][ T3492] program syz.0.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.884465][ T3443] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.920618][ T3443] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.954169][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.961712][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.969370][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.976791][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.984337][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.991794][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.999321][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.006729][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.014188][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.021690][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.030864][ T3407] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 34.076371][ T3512] UHID_CREATE from different security context by process 9 (syz.1.13), this is not allowed. [ 34.170408][ T3518] netlink: 'syz.3.17': attribute type 13 has an invalid length. [ 34.299652][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.306940][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.375171][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.395252][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.426516][ T3525] loop2: detected capacity change from 0 to 512 [ 34.468447][ T3525] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.481635][ T3525] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.501965][ T3525] EXT4-fs (loop2): 1 truncate cleaned up [ 34.511229][ T3525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.565585][ T3435] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.574610][ T3435] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.599928][ T3435] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.608927][ T3435] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.675536][ T3518] syz.3.17 (3518) used greatest stack depth: 10752 bytes left [ 34.747828][ T3508] loop0: detected capacity change from 0 to 512 [ 34.759688][ T3508] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.784941][ T3508] EXT4-fs (loop0): 1 truncate cleaned up [ 34.802315][ T3508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.873732][ T3540] program syz.3.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.900139][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.127234][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.183924][ T3546] loop2: detected capacity change from 0 to 8192 [ 35.473780][ T3574] loop0: detected capacity change from 0 to 512 [ 35.482066][ T3574] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.493921][ T3574] EXT4-fs (loop0): 1 truncate cleaned up [ 35.499989][ T3574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.615548][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.634281][ T3578] program syz.0.36 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.693389][ T3583] loop0: detected capacity change from 0 to 2048 [ 35.710689][ T3583] EXT4-fs (loop0): failed to initialize system zone (-117) [ 35.718100][ T3583] EXT4-fs (loop0): mount failed [ 35.822317][ T3591] loop2: detected capacity change from 0 to 512 [ 35.842480][ T3591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.859543][ T3591] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.887051][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.161130][ T3610] loop3: detected capacity change from 0 to 1024 [ 36.172464][ T3610] ======================================================= [ 36.172464][ T3610] WARNING: The mand mount option has been deprecated and [ 36.172464][ T3610] and is ignored by this kernel. Remove the mand [ 36.172464][ T3610] option from the mount to silence this warning. [ 36.172464][ T3610] ======================================================= [ 36.222962][ T3610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.238008][ T3610] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.248834][ T3587] loop0: detected capacity change from 0 to 512 [ 36.260808][ T3587] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.294457][ T3587] EXT4-fs (loop0): 1 truncate cleaned up [ 36.300875][ T3587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.311447][ T3610] Invalid option length (1045175) for dns_resolver key [ 36.321857][ T3610] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm \.: lblock 3 mapped to illegal pblock 3 (length 1) [ 36.335622][ T3610] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 36.348067][ T3610] EXT4-fs (loop3): This should not happen!! Data will be lost [ 36.348067][ T3610] [ 36.376649][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.402529][ T3615] program syz.3.48 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.480385][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.803169][ T3627] loop3: detected capacity change from 0 to 8192 [ 36.944727][ T3633] loop4: detected capacity change from 0 to 512 [ 36.961626][ T3633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.974417][ T3633] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.988352][ T3633] netlink: 'syz.4.56': attribute type 1 has an invalid length. [ 36.996033][ T3633] netlink: 224 bytes leftover after parsing attributes in process `syz.4.56'. [ 37.063000][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.240687][ T3638] loop4: detected capacity change from 0 to 1024 [ 37.247756][ T3638] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 37.258771][ T3638] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 37.268750][ T3638] JBD2: no valid journal superblock found [ 37.274622][ T3638] EXT4-fs (loop4): Could not load journal inode [ 37.285374][ T3638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 37.295901][ T3638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 37.417029][ T3648] loop3: detected capacity change from 0 to 1024 [ 37.426718][ T3649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 37.442428][ T3653] loop0: detected capacity change from 0 to 512 [ 37.448631][ T3649] bridge0: entered promiscuous mode [ 37.455658][ T3649] bridge0: port 3(macvlan2) entered blocking state [ 37.457190][ T3648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.462268][ T3649] bridge0: port 3(macvlan2) entered disabled state [ 37.481002][ T3649] macvlan2: entered allmulticast mode [ 37.486429][ T3649] bridge0: entered allmulticast mode [ 37.492168][ T3648] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.500073][ T3653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.502961][ T3649] macvlan2: left allmulticast mode [ 37.517382][ T3653] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.520404][ T3649] bridge0: left allmulticast mode [ 37.521042][ T3649] bridge0: left promiscuous mode [ 37.549701][ T3653] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 37.557324][ T3653] netlink: 224 bytes leftover after parsing attributes in process `syz.0.61'. [ 37.590696][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.603227][ T3648] Invalid option length (1045175) for dns_resolver key [ 37.616791][ T3648] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm \.: lblock 3 mapped to illegal pblock 3 (length 1) [ 37.638726][ T3648] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 37.651300][ T3648] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.651300][ T3648] [ 37.682191][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.905597][ T3679] loop2: detected capacity change from 0 to 1024 [ 37.951714][ T3679] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 37.962867][ T3679] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 37.975347][ T3679] JBD2: no valid journal superblock found [ 37.981205][ T3679] EXT4-fs (loop2): Could not load journal inode [ 37.993400][ T3679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 38.003057][ T3679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 38.033627][ T3688] loop2: detected capacity change from 0 to 1024 [ 38.064632][ T3688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.077315][ T3688] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.134946][ T3688] Invalid option length (1045175) for dns_resolver key [ 38.149421][ T3696] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.71: lblock 3 mapped to illegal pblock 3 (length 1) [ 38.188150][ T3696] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 38.194523][ T3407] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.03 Device [syz1] on syz1 [ 38.200566][ T3696] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.200566][ T3696] [ 38.272493][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.329075][ T3707] blktrace: Concurrent blktraces are not allowed on sg0 [ 38.400238][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 38.400255][ T29] audit: type=1326 audit(1759101501.085:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18d2feec9 code=0x7ffc0000 [ 38.429739][ T29] audit: type=1326 audit(1759101501.085:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18d2feec9 code=0x7ffc0000 [ 38.453306][ T29] audit: type=1326 audit(1759101501.125:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fb18d2feec9 code=0x7ffc0000 [ 38.476532][ T29] audit: type=1326 audit(1759101501.125:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18d2feec9 code=0x7ffc0000 [ 38.500257][ T29] audit: type=1326 audit(1759101501.125:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18d2feec9 code=0x7ffc0000 [ 38.523640][ T29] audit: type=1326 audit(1759101501.125:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb18d2fd710 code=0x7ffc0000 [ 38.546890][ T29] audit: type=1326 audit(1759101501.125:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18d2feec9 code=0x7ffc0000 [ 38.570318][ T29] audit: type=1326 audit(1759101501.125:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb18d2fdb2a code=0x7ffc0000 [ 38.593873][ T29] audit: type=1326 audit(1759101501.135:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb18d331785 code=0x7ffc0000 [ 38.653900][ T29] audit: type=1326 audit(1759101501.335:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18d2feec9 code=0x7ffc0000 [ 38.766310][ T3712] loop2: detected capacity change from 0 to 8192 [ 38.871875][ T3702] loop1: detected capacity change from 0 to 512 [ 38.881666][ T3702] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.893358][ T3702] EXT4-fs (loop1): 1 truncate cleaned up [ 38.899671][ T3702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.004647][ T3723] loop3: detected capacity change from 0 to 1024 [ 39.012965][ T3723] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.023970][ T3723] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.035274][ T3723] JBD2: no valid journal superblock found [ 39.041138][ T3723] EXT4-fs (loop3): Could not load journal inode [ 39.044699][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.060921][ T3723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 39.075931][ T3723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 39.194439][ T3746] program syz.1.89 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.206062][ T3746] process 'syz.1.89' launched './file0' with NULL argv: empty string added [ 39.249039][ T3752] program syz.4.92 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.283671][ T3750] loop1: detected capacity change from 0 to 8192 [ 39.449030][ T3754] loop4: detected capacity change from 0 to 1024 [ 39.456463][ T3754] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.467421][ T3754] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.478784][ T3754] JBD2: no valid journal superblock found [ 39.484659][ T3754] EXT4-fs (loop4): Could not load journal inode [ 39.496821][ T3754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'. [ 39.555207][ T3777] program syz.4.102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.566451][ T3779] program syz.1.103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.588390][ T3763] loop2: detected capacity change from 0 to 1024 [ 39.601424][ T3763] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.612534][ T3763] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.629479][ T3763] JBD2: no valid journal superblock found [ 39.635275][ T3763] EXT4-fs (loop2): Could not load journal inode [ 39.731424][ T3784] loop1: detected capacity change from 0 to 8192 [ 39.755169][ T3792] loop2: detected capacity change from 0 to 1024 [ 39.781678][ T3792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.800771][ T3792] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.927451][ T3792] Invalid option length (1045175) for dns_resolver key [ 39.981330][ T3792] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm \.: lblock 3 mapped to illegal pblock 3 (length 1) [ 39.998646][ T3792] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 40.011223][ T3792] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.011223][ T3792] [ 40.024947][ T3787] loop4: detected capacity change from 0 to 8192 [ 40.076452][ T3808] program syz.1.115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.097152][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.319780][ T3788] loop0: detected capacity change from 0 to 512 [ 40.335063][ T3788] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.366672][ T3788] EXT4-fs (loop0): 1 truncate cleaned up [ 40.373925][ T3788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.572226][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.640611][ T3827] program syz.4.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.682119][ T3806] loop3: detected capacity change from 0 to 512 [ 40.691743][ T3806] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.702898][ T3806] EXT4-fs (loop3): 1 truncate cleaned up [ 40.708879][ T3806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.798703][ T3825] loop0: detected capacity change from 0 to 1024 [ 40.806019][ T3825] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.816968][ T3825] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 40.827801][ T3825] JBD2: no valid journal superblock found [ 40.833588][ T3825] EXT4-fs (loop0): Could not load journal inode [ 40.870731][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.926635][ T3829] loop4: detected capacity change from 0 to 8192 [ 41.284710][ T3854] loop1: detected capacity change from 0 to 8192 [ 41.425771][ T3858] loop1: detected capacity change from 0 to 1024 [ 41.456549][ T3858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.481311][ T3843] loop3: detected capacity change from 0 to 512 [ 41.489320][ T3858] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.500312][ T3843] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.536935][ T3843] EXT4-fs (loop3): 1 truncate cleaned up [ 41.543644][ T3843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.576548][ T3858] Invalid option length (1045175) for dns_resolver key [ 41.633116][ T3858] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm \.: lblock 3 mapped to illegal pblock 3 (length 1) [ 41.654188][ T3850] loop2: detected capacity change from 0 to 512 [ 41.660874][ T3858] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 41.673198][ T3858] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.673198][ T3858] [ 41.696770][ T3850] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.746038][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.747188][ T3850] EXT4-fs (loop2): 1 truncate cleaned up [ 41.761304][ T3850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.847517][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.914451][ T3870] loop4: detected capacity change from 0 to 1024 [ 41.926755][ T3880] loop1: detected capacity change from 0 to 1024 [ 41.936893][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.953555][ T3870] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.964704][ T3870] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 41.975509][ T3870] JBD2: no valid journal superblock found [ 41.981432][ T3870] EXT4-fs (loop4): Could not load journal inode [ 42.009049][ T3880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.052410][ T3880] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.108618][ T3407] hid_parser_main: 156 callbacks suppressed [ 42.108637][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.122046][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.128350][ T3880] Invalid option length (1045175) for dns_resolver key [ 42.129531][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.143790][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.151244][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.157946][ T3880] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm \.: lblock 3 mapped to illegal pblock 3 (length 1) [ 42.158649][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.179440][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.186926][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.194412][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.201863][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.213894][ T3880] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 42.215013][ T3407] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.03 Device [syz1] on syz1 [ 42.226311][ T3880] EXT4-fs (loop1): This should not happen!! Data will be lost [ 42.226311][ T3880] [ 42.266009][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.391234][ T3909] syzkaller0: entered promiscuous mode [ 42.396771][ T3909] syzkaller0: entered allmulticast mode [ 42.545164][ T3915] loop1: detected capacity change from 0 to 8192 [ 42.781792][ T3925] __nla_validate_parse: 7 callbacks suppressed [ 42.781813][ T3925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 42.801067][ T3925] bridge0: entered promiscuous mode [ 42.809345][ T3925] bridge0: port 3(macvlan2) entered blocking state [ 42.815937][ T3925] bridge0: port 3(macvlan2) entered disabled state [ 42.824050][ T3925] macvlan2: entered allmulticast mode [ 42.829539][ T3925] bridge0: entered allmulticast mode [ 42.836948][ T3925] macvlan2: left allmulticast mode [ 42.842155][ T3925] bridge0: left allmulticast mode [ 42.847697][ T3919] loop1: detected capacity change from 0 to 1024 [ 42.847984][ T3925] bridge0: left promiscuous mode [ 42.859139][ T3919] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.870106][ T3919] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 42.880185][ T3919] JBD2: no valid journal superblock found [ 42.885926][ T3919] EXT4-fs (loop1): Could not load journal inode [ 43.083057][ T3927] loop3: detected capacity change from 0 to 8192 [ 43.127207][ T3950] loop1: detected capacity change from 0 to 1024 [ 43.135474][ T3950] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.146503][ T3950] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 43.157966][ T3950] JBD2: no valid journal superblock found [ 43.163839][ T3950] EXT4-fs (loop1): Could not load journal inode [ 43.174258][ T3934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 43.184001][ T3934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 43.218599][ T3953] program syz.1.161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.677970][ T3957] program syz.1.162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.856436][ T3959] loop0: detected capacity change from 0 to 1024 [ 43.897253][ T3959] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.908324][ T3959] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 43.996266][ T3959] JBD2: no valid journal superblock found [ 44.002194][ T3959] EXT4-fs (loop0): Could not load journal inode [ 44.291385][ T3373] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.03 Device [syz1] on syz1 [ 44.306484][ T3983] loop3: detected capacity change from 0 to 2048 [ 44.391644][ T3983] EXT4-fs (loop3): failed to initialize system zone (-117) [ 44.429210][ T3983] EXT4-fs (loop3): mount failed [ 44.471685][ T3983] netlink: 168 bytes leftover after parsing attributes in process `syz.3.172'. [ 44.574773][ T29] kauditd_printk_skb: 713 callbacks suppressed [ 44.574792][ T29] audit: type=1326 audit(1759101507.255:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b185eec9 code=0x7ffc0000 [ 44.587778][ T3998] syzkaller0: entered promiscuous mode [ 44.610012][ T3998] syzkaller0: entered allmulticast mode [ 44.612707][ T29] audit: type=1326 audit(1759101507.295:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f20b185eec9 code=0x7ffc0000 [ 44.639008][ T29] audit: type=1326 audit(1759101507.295:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b185eec9 code=0x7ffc0000 [ 44.662828][ T29] audit: type=1326 audit(1759101507.295:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b185eec9 code=0x7ffc0000 [ 44.704611][ T4002] loop3: detected capacity change from 0 to 8192 [ 44.711524][ T29] audit: type=1326 audit(1759101507.295:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20b185d710 code=0x7ffc0000 [ 44.735070][ T29] audit: type=1326 audit(1759101507.295:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b185eec9 code=0x7ffc0000 [ 44.758487][ T29] audit: type=1326 audit(1759101507.295:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b185eec9 code=0x7ffc0000 [ 44.781879][ T29] audit: type=1326 audit(1759101507.295:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20b185eec9 code=0x7ffc0000 [ 44.805151][ T29] audit: type=1326 audit(1759101507.295:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b185eec9 code=0x7ffc0000 [ 44.828641][ T29] audit: type=1326 audit(1759101507.295:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b185eec9 code=0x7ffc0000 [ 44.917571][ T4016] program syz.4.183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.945498][ T4019] loop4: detected capacity change from 0 to 512 [ 44.971769][ T4019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.985534][ T4019] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.015952][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.079836][ T4017] loop1: detected capacity change from 0 to 1024 [ 45.088154][ T4017] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.099188][ T4017] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.110868][ T4017] JBD2: no valid journal superblock found [ 45.116632][ T4017] EXT4-fs (loop1): Could not load journal inode [ 45.188880][ T4047] program syz.2.195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.223764][ T4049] program syz.2.196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.226935][ T4045] loop4: detected capacity change from 0 to 8192 [ 45.460910][ T4074] program syz.4.207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.466641][ T4070] syzkaller0: entered promiscuous mode [ 45.475826][ T4070] syzkaller0: entered allmulticast mode [ 45.504369][ T4077] program syz.4.208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.589316][ T4068] loop0: detected capacity change from 0 to 1024 [ 45.596785][ T4068] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.607772][ T4068] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.608311][ T4085] loop4: detected capacity change from 0 to 8192 [ 45.632881][ T4068] JBD2: no valid journal superblock found [ 45.638661][ T4068] EXT4-fs (loop0): Could not load journal inode [ 45.798510][ T4102] netlink: 'syz.3.219': attribute type 13 has an invalid length. [ 45.831472][ T4104] program syz.3.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.884711][ T4111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.218'. [ 45.897968][ T4111] bridge0: entered promiscuous mode [ 45.904876][ T4111] bridge0: port 3(macvlan2) entered blocking state [ 45.911472][ T4111] bridge0: port 3(macvlan2) entered disabled state [ 45.918616][ T4111] macvlan2: entered allmulticast mode [ 45.924202][ T4111] bridge0: entered allmulticast mode [ 46.052234][ T4111] macvlan2: left allmulticast mode [ 46.057506][ T4111] bridge0: left allmulticast mode [ 46.101693][ T4111] bridge0: left promiscuous mode [ 46.357713][ T4121] loop3: detected capacity change from 0 to 1024 [ 46.389176][ T4121] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.400227][ T4121] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.422532][ T4119] syzkaller0: entered promiscuous mode [ 46.428116][ T4119] syzkaller0: entered allmulticast mode [ 46.463613][ T4121] JBD2: no valid journal superblock found [ 46.469428][ T4121] EXT4-fs (loop3): Could not load journal inode [ 46.485772][ T4123] loop1: detected capacity change from 0 to 8192 [ 46.705689][ T4137] netlink: 'syz.2.231': attribute type 13 has an invalid length. [ 46.800289][ T4140] program syz.0.232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.818098][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.825440][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.972437][ T4147] Zero length message leads to an empty skb [ 47.047600][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.074550][ T4151] blktrace: Concurrent blktraces are not allowed on sg0 [ 47.194733][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.323255][ T4163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 47.672010][ T70] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.684173][ T4163] bridge0: port 3(macvlan2) entered blocking state [ 47.690792][ T4163] bridge0: port 3(macvlan2) entered disabled state [ 47.740399][ T4163] macvlan2: entered allmulticast mode [ 47.745873][ T4163] bridge0: entered allmulticast mode [ 47.776234][ T4171] loop2: detected capacity change from 0 to 1024 [ 47.787757][ T4163] macvlan2: left allmulticast mode [ 47.792997][ T4163] bridge0: left allmulticast mode [ 47.826799][ T4171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.849052][ T70] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.872618][ T4171] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.888641][ T70] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.964555][ T70] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.040686][ T4171] Invalid option length (1045175) for dns_resolver key [ 48.122640][ T4176] syzkaller0: entered promiscuous mode [ 48.128194][ T4176] syzkaller0: entered allmulticast mode [ 48.190404][ T4193] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.242: lblock 3 mapped to illegal pblock 3 (length 1) [ 48.241604][ T4193] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 48.254032][ T4193] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.254032][ T4193] [ 48.299260][ T4192] syzkaller0: entered promiscuous mode [ 48.304808][ T4192] syzkaller0: entered allmulticast mode [ 48.366655][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.470550][ T4206] netlink: 'syz.3.255': attribute type 13 has an invalid length. [ 48.484017][ T4188] loop1: detected capacity change from 0 to 8192 [ 48.639734][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 48.652900][ T4219] bridge0: port 3(macvlan2) entered blocking state [ 48.659620][ T4219] bridge0: port 3(macvlan2) entered disabled state [ 48.670216][ T4219] macvlan2: entered allmulticast mode [ 48.675661][ T4219] bridge0: entered allmulticast mode [ 48.684374][ T4219] macvlan2: left allmulticast mode [ 48.689730][ T4219] bridge0: left allmulticast mode [ 48.735275][ T4231] blktrace: Concurrent blktraces are not allowed on sg0 [ 48.753076][ T4208] loop2: detected capacity change from 0 to 8192 [ 48.891693][ T4242] loop4: detected capacity change from 0 to 1024 [ 48.911514][ T4242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.923784][ T4242] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.977305][ T4242] Invalid option length (1045175) for dns_resolver key [ 48.988397][ T4242] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm \.: lblock 3 mapped to illegal pblock 3 (length 1) [ 49.004494][ T4242] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 49.016932][ T4242] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.016932][ T4242] [ 49.068801][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.158015][ T4257] loop4: detected capacity change from 0 to 512 [ 49.167400][ T3373] hid_parser_main: 156 callbacks suppressed [ 49.167422][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.180902][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.188359][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.195824][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.203334][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.210805][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.218259][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.225796][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.233241][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.240679][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.249363][ T3373] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.03 Device [syz1] on syz1 [ 49.260892][ T4257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.273493][ T4257] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.300751][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.340807][ T4266] netlink: 'syz.4.279': attribute type 13 has an invalid length. [ 49.402555][ T4270] program syz.2.280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.438608][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.445881][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.541653][ T4266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.551864][ T4266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.656209][ T4278] syzkaller0: entered promiscuous mode [ 49.661933][ T4278] syzkaller0: entered allmulticast mode [ 49.671597][ T70] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.685781][ T4291] program syz.2.287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.720507][ T4294] loop2: detected capacity change from 0 to 512 [ 49.721998][ T70] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.736888][ T70] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.746279][ T70] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.752240][ T4294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.767925][ T4294] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.795879][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.813496][ T4301] blktrace: Concurrent blktraces are not allowed on sg0 [ 49.836536][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 49.836555][ T29] audit: type=1326 audit(1759101512.515:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18d2feec9 code=0x7ffc0000 [ 49.866795][ T29] audit: type=1326 audit(1759101512.515:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18d2feec9 code=0x7ffc0000 [ 49.890314][ T29] audit: type=1326 audit(1759101512.525:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb18d2fdb2a code=0x7ffc0000 [ 49.913459][ T29] audit: type=1326 audit(1759101512.525:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb18d331785 code=0x7ffc0000 [ 49.946221][ T4296] loop4: detected capacity change from 0 to 1024 [ 49.953517][ T4296] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.964573][ T4296] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.975093][ T4296] JBD2: no valid journal superblock found [ 49.980907][ T4296] EXT4-fs (loop4): Could not load journal inode [ 49.991077][ T4296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 50.002988][ T4296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 50.040972][ T29] audit: type=1326 audit(1759101512.725:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18d2feec9 code=0x7ffc0000 [ 50.065984][ T29] audit: type=1326 audit(1759101512.725:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18d2feec9 code=0x7ffc0000 [ 50.089556][ T29] audit: type=1326 audit(1759101512.725:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb18d2fd710 code=0x7ffc0000 [ 50.112960][ T29] audit: type=1326 audit(1759101512.725:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb18d2feacb code=0x7ffc0000 [ 50.113243][ T4303] loop2: detected capacity change from 0 to 8192 [ 50.136287][ T29] audit: type=1326 audit(1759101512.725:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18d2feec9 code=0x7ffc0000 [ 50.136416][ T29] audit: type=1326 audit(1759101512.725:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18d2feec9 code=0x7ffc0000 [ 50.248935][ T4314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 50.265638][ T4314] bridge0: port 3(macvlan2) entered blocking state [ 50.272354][ T4314] bridge0: port 3(macvlan2) entered disabled state [ 50.280496][ T4314] macvlan2: entered allmulticast mode [ 50.285980][ T4314] bridge0: entered allmulticast mode [ 50.316940][ T4314] macvlan2: left allmulticast mode [ 50.322255][ T4314] bridge0: left allmulticast mode [ 50.357722][ T4316] syzkaller0: entered promiscuous mode [ 50.363353][ T4316] syzkaller0: entered allmulticast mode [ 50.441492][ T4323] loop0: detected capacity change from 0 to 1024 [ 50.462342][ T4323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.482564][ T4323] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.537543][ T4323] Invalid option length (1045175) for dns_resolver key [ 50.563869][ T4323] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.298: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.580012][ T4323] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 50.592407][ T4323] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.592407][ T4323] [ 50.623751][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.672574][ T3373] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.03 Device [syz1] on syz1 [ 50.874842][ T4346] syzkaller0: entered promiscuous mode [ 50.880451][ T4346] syzkaller0: entered allmulticast mode [ 50.904373][ T4351] loop1: detected capacity change from 0 to 512 [ 50.921184][ T4351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.934115][ T4351] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.950561][ T4351] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 50.958280][ T4351] netlink: 224 bytes leftover after parsing attributes in process `syz.1.309'. [ 50.983732][ T4357] netlink: 'syz.4.311': attribute type 13 has an invalid length. [ 50.998596][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.009791][ T4359] program syz.2.312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.102726][ T4375] program syz.4.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.191625][ T4382] syzkaller0: entered promiscuous mode [ 51.197175][ T4382] syzkaller0: entered allmulticast mode [ 51.331124][ T4373] loop2: detected capacity change from 0 to 8192 [ 51.580002][ T4388] netlink: 'syz.3.326': attribute type 13 has an invalid length. [ 51.641715][ T4398] program syz.0.331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.470418][ T4483] netlink: 'syz.1.345': attribute type 13 has an invalid length. [ 53.575476][ T4413] loop0: detected capacity change from 0 to 512 [ 53.582756][ T4483] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.589990][ T4483] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.602666][ T4413] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.615700][ T4413] EXT4-fs (loop0): 1 truncate cleaned up [ 53.630609][ T4413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.681932][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.702257][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.798083][ T51] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.831010][ T51] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.845519][ T51] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.863523][ T51] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.026347][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.101512][ T4552] syzkaller0: entered promiscuous mode [ 54.107114][ T4552] syzkaller0: entered allmulticast mode [ 54.201886][ T4574] program syz.0.356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.260741][ T4546] loop2: detected capacity change from 0 to 8192 [ 54.273393][ T4584] netlink: 'syz.3.358': attribute type 13 has an invalid length. [ 54.851600][ T4626] program syz.2.364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.916485][ T4632] netlink: 56 bytes leftover after parsing attributes in process `syz.2.367'. [ 54.987441][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 54.987459][ T29] audit: type=1326 audit(1759101517.665:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba460eec9 code=0x7ffc0000 [ 55.017084][ T29] audit: type=1326 audit(1759101517.665:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba460eec9 code=0x7ffc0000 [ 55.042730][ T29] audit: type=1326 audit(1759101517.675:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faba460d710 code=0x7ffc0000 [ 55.066238][ T29] audit: type=1326 audit(1759101517.675:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faba460eacb code=0x7ffc0000 [ 55.066592][ T4622] loop1: detected capacity change from 0 to 8192 [ 55.089574][ T29] audit: type=1326 audit(1759101517.675:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba460eec9 code=0x7ffc0000 [ 55.089613][ T29] audit: type=1326 audit(1759101517.675:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faba460eec9 code=0x7ffc0000 [ 55.142615][ T29] audit: type=1326 audit(1759101517.675:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba460eec9 code=0x7ffc0000 [ 55.166064][ T29] audit: type=1326 audit(1759101517.675:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7faba460eec9 code=0x7ffc0000 [ 55.189656][ T29] audit: type=1326 audit(1759101517.675:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba460eec9 code=0x7ffc0000 [ 55.213022][ T29] audit: type=1326 audit(1759101517.675:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7faba460eec9 code=0x7ffc0000 [ 55.322198][ T4639] netlink: 'syz.3.369': attribute type 13 has an invalid length. [ 55.335041][ T4637] syzkaller0: entered promiscuous mode [ 55.340742][ T4637] syzkaller0: entered allmulticast mode [ 55.387495][ T4643] program syz.3.371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.435559][ T4649] program syz.0.374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.704663][ T4668] program syz.4.382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.763110][ T4651] loop0: detected capacity change from 0 to 512 [ 55.778600][ T4651] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.808654][ T4651] EXT4-fs (loop0): 1 truncate cleaned up [ 55.815092][ T4651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.867971][ T4677] program syz.2.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.876255][ T4673] syzkaller0: entered promiscuous mode [ 55.882740][ T4673] syzkaller0: entered allmulticast mode [ 56.037304][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.163075][ T4703] program syz.4.394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.274804][ T4711] netlink: 56 bytes leftover after parsing attributes in process `syz.2.396'. [ 57.333013][ T4714] loop0: detected capacity change from 0 to 512 [ 57.364030][ T4717] loop4: detected capacity change from 0 to 1024 [ 57.383425][ T4717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.391800][ T4714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.407170][ T4717] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.418829][ T4714] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.474693][ T4717] Invalid option length (1045175) for dns_resolver key [ 57.577048][ T4714] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 57.584992][ T4714] netlink: 224 bytes leftover after parsing attributes in process `syz.0.397'. [ 57.590694][ T4717] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm \.: lblock 3 mapped to illegal pblock 3 (length 1) [ 57.614208][ T4717] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 57.626561][ T4717] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.626561][ T4717] [ 57.658299][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.676281][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.696654][ T4740] loop0: detected capacity change from 0 to 512 [ 57.724396][ T4740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.753503][ T4698] loop3: detected capacity change from 0 to 512 [ 57.761964][ T4698] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.773516][ T4698] EXT4-fs (loop3): 1 truncate cleaned up [ 57.781502][ T4698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.794197][ T4740] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.831601][ T4740] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 57.839323][ T4740] netlink: 224 bytes leftover after parsing attributes in process `syz.0.409'. [ 57.864277][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.030994][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.163745][ T4758] loop0: detected capacity change from 0 to 8192 [ 58.292639][ T4798] syzkaller0: entered promiscuous mode [ 58.298218][ T4798] syzkaller0: entered allmulticast mode [ 58.322752][ T4808] program syz.2.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.360150][ T4812] loop2: detected capacity change from 0 to 1024 [ 58.380814][ T4744] loop4: detected capacity change from 0 to 512 [ 58.388086][ T4812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.397191][ T4744] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.402049][ T4812] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.423686][ T4744] EXT4-fs (loop4): 1 truncate cleaned up [ 58.456910][ T4744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.471799][ T4812] Invalid option length (1045175) for dns_resolver key [ 58.508339][ T4827] loop3: detected capacity change from 0 to 512 [ 58.510651][ T4812] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm \.: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.537534][ T4812] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 58.543497][ T4827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.549982][ T4812] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.549982][ T4812] [ 58.562490][ T4827] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.585874][ T4744] ================================================================== [ 58.594010][ T4744] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 58.601167][ T4744] [ 58.603499][ T4744] read-write to 0xffff88810a34afe8 of 8 bytes by task 4754 on cpu 0: [ 58.611659][ T4744] xas_set_mark+0x82/0x140 [ 58.616129][ T4744] tag_pages_for_writeback+0xc2/0x290 [ 58.621534][ T4744] ext4_do_writepages+0x6b2/0x2750 [ 58.626673][ T4744] ext4_writepages+0x176/0x300 [ 58.631449][ T4744] do_writepages+0x1c3/0x310 [ 58.636061][ T4744] filemap_write_and_wait_range+0x144/0x340 [ 58.641981][ T4744] fiemap_prep+0x14d/0x170 [ 58.646407][ T4744] iomap_fiemap+0x8c/0x460 [ 58.650839][ T4744] ext4_fiemap+0x1f9/0x220 [ 58.655278][ T4744] do_vfs_ioctl+0xc5e/0xe10 [ 58.659790][ T4744] __se_sys_ioctl+0x82/0x140 [ 58.664391][ T4744] __x64_sys_ioctl+0x43/0x50 [ 58.668991][ T4744] x64_sys_call+0x1816/0x2ff0 [ 58.673685][ T4744] do_syscall_64+0xd2/0x200 [ 58.678223][ T4744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.684140][ T4744] [ 58.686472][ T4744] read to 0xffff88810a34afe8 of 8 bytes by task 4744 on cpu 1: [ 58.694026][ T4744] xas_find_marked+0x218/0x620 [ 58.698823][ T4744] find_get_entry+0x5d/0x380 [ 58.703432][ T4744] filemap_get_folios_tag+0x13b/0x210 [ 58.708851][ T4744] mpage_prepare_extent_to_map+0x320/0xc00 [ 58.714674][ T4744] ext4_do_writepages+0x708/0x2750 [ 58.719808][ T4744] ext4_writepages+0x176/0x300 [ 58.724590][ T4744] do_writepages+0x1c3/0x310 [ 58.729200][ T4744] file_write_and_wait_range+0x156/0x2c0 [ 58.734863][ T4744] generic_buffers_fsync_noflush+0x45/0x120 [ 58.740775][ T4744] ext4_sync_file+0x1ab/0x690 [ 58.745480][ T4744] vfs_fsync_range+0x10a/0x130 [ 58.750273][ T4744] ext4_buffered_write_iter+0x34f/0x3c0 [ 58.755871][ T4744] ext4_file_write_iter+0x383/0xf00 [ 58.761103][ T4744] do_iter_readv_writev+0x499/0x540 [ 58.766321][ T4744] vfs_writev+0x2df/0x8b0 [ 58.770671][ T4744] do_writev+0xe7/0x210 [ 58.774847][ T4744] __x64_sys_writev+0x45/0x50 [ 58.779542][ T4744] x64_sys_call+0x1e9a/0x2ff0 [ 58.784237][ T4744] do_syscall_64+0xd2/0x200 [ 58.788772][ T4744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.794771][ T4744] [ 58.797106][ T4744] value changed: 0x003fffffffffffff -> 0x003ffffffffffffc [ 58.804219][ T4744] [ 58.806549][ T4744] Reported by Kernel Concurrency Sanitizer on: [ 58.812725][ T4744] CPU: 1 UID: 0 PID: 4744 Comm: syz.4.399 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.822391][ T4744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.832459][ T4744] ================================================================== [ 58.858544][ T4827] netlink: 'syz.3.411': attribute type 1 has an invalid length. [ 58.866417][ T4827] netlink: 224 bytes leftover after parsing attributes in process `syz.3.411'. [ 58.894293][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.927695][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.945287][ T4744] syz.4.399 (4744) used greatest stack depth: 9448 bytes left [ 58.958805][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.